workspace-integrity-guardian

SOUL.md, AGENTS.md, MEMORY.md, and IDENTITY.md define the agent's persistent identity. These files can be accidentally overwritten by the agent itself, corrupted during a failed skill execution, or modified by a malicious installed skill. The SOUL.md documentation warns: "A compromised SOUL.md means a permanently hijacked agent that survives restarts."

This skill hashes all critical workspace files on first run, then checks for drift on a weekly schedule and on demand.

Protected files

By default, the following files are monitored:

• ~/.openclaw/workspace/SOUL.md
• ~/.openclaw/workspace/AGENTS.md
• ~/.openclaw/workspace/MEMORY.md
• ~/.openclaw/workspace/IDENTITY.md

Add custom files:

python3 guard.py --add-file ~/.openclaw/workspace/MY_RULES.md